Integrate cybersecurity through the SDLC, focusing on app sec, CI/CD security, and container security.
Conduct vulnerability assessments with DoD tools, DISA STIGs, SRGs, and implement secure OS configs.
Serve as GitLab security reviewer and support RMF artifacts and mitigation strategies.
Millennium is a cybersecurity company delivering Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering for national security missions. It is part of the Markon enterprise with an elite team of over 300 professionals.
Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
Implement automated vulnerability scanning for Docker images and dependencies.
Secure Kubernetes workloads and enforce security policies throughout the CI/CD lifecycle.
Gcore is a global provider of infrastructure and software solutions for AI, cloud, network, and security. With 550+ professionals and 210+ edge locations, we build the foundation that connects the world to AI.
Build and maintain secure CI/CD pipelines, embedding security testing and controls into software development and deployment.
Strengthen application and cloud-native security across Kubernetes and containerized environments, identifying risks and implementing practical controls.
Manage CVE and vulnerability lifecycles, supporting prioritization and working with application teams on mitigation and remediation.
Redcare Pharmacy is Europe's leading online pharmacy, driven by dedicated teams and cutting-edge innovation. The company fosters an enjoyable and collaborative working environment where every employee feels comfortable and motivated to contribute to the vision: 'Until every human has their health.'
Design, develop, and optimize automated CI/CD pipelines for enterprise applications, microservices, and infrastructure workflows.
Integrate DevSecOps practices including automated security testing, compliance controls, and vulnerability remediation.
Collaborate with cloud, development, and security teams to support containerized workloads on AWS and Kubernetes.
They are a mission-driven technology partner focused on modernizing critical government systems and strengthening secure, reliable digital services. They hire through Jobgether and work with multidisciplinary teams across software engineering, cloud infrastructure, cybersecurity, and operations.
Conduct code and container vulnerability assessments using DoD scanning tools, DISA STIGs, and SRGs.
Apply SAST and DAST methodologies and integrate security controls into CI/CD pipelines.
Serve as GitLab security reviewer and coordinate remediation of security findings across teams.
This partner company supports cybersecurity and secure software delivery within U.S. Department of Defense and Navy environments. The organization offers a fully remote, mission-focused culture with opportunities to collaborate across engineering and program teams.
Design and build CI/CD workflow integrations that bring application security into software delivery pipelines and developer environments.
Run discovery sessions and architecture workshops with enterprise customers to align the Snyk platform to their requirements.
Build trusted relationships with technical stakeholders and support implementations from pre-sales through post-sales.
Snyk builds a security platform where AI agents work alongside engineers to find and fix risk at the speed software is built. The company fosters an inclusive culture with global benefits and employee resource groups, aiming to make the digital world safer.
Develop and maintain automated CI/CD pipelines and Infrastructure as Code templates for secure software delivery.
Work with Docker, Kubernetes, and AWS to standardize deployments and improve platform reliability.
Collaborate with development, security, and infrastructure teams to embed DevSecOps practices and troubleshoot issues.
The partner company is a technology-driven organization focused on cloud infrastructure, platform engineering, and secure software delivery. It promotes a collaborative culture and operates with a fully remote workforce.
Own the technical direction for NodeZero container image build, signing, scanning, and OTA delivery.
Design and operate CI/CD pipelines, image hardening, and release engineering standards at scale.
Mentor engineers and drive architecture decisions across team boundaries for secure product delivery.
Horizon3 is a fast-growing, remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. The team is a fusion of former special operations cyber operators and engineers, focused on respect, collaboration, and results.
Set product security direction across major products and platforms, leading cross-functional initiatives.
Embed security by design into roadmaps and engineering work, with high autonomy.
Drive security assurance programs and mentor engineers across the organization.
Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.
Embed security practices into the SDLC, implementing SAST, SCA, and secret scanning controls in CI/CD pipelines.
Harden AWS infrastructure and infrastructure-as-code, including IAM, Terraform, VPCs, and KMS.
Lead a Security Champions program, conduct threat modeling, and define security standards for APIs and critical features.
The company is a fast-growing technology organization focused on application and cloud security. It fosters a collaborative, remote-first culture with technical autonomy and a focus on developer empowerment.
Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.
Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.
Manage the full vulnerability lifecycle: scan, triage, remediate, and verify across code, containers, and IaC.
Administer SAST, DAST, SCA, and secret scanning tools in CI/CD and investigate alerts.
Monitor logs, SIEM/Wazuh rules, and Cloudflare/WAF configurations for operational security.
Boosta is a holding tech company that creates, develops, and invests in digital businesses with global potential. We collaborate with over 800 specialists worldwide, and TechCore, our service team, includes 50+ professionals handling 300+ projects a year.
Work on client consulting projects to design and implement cloud native security architectures across AWS, GCP, and Azure.
Contribute to internal labs and open source projects, with a focus on threat modelling, supply chain security, and DevSecOps practices.
Collaborate with a team of SANS authors and engineers to deliver pragmatic security solutions for highly regulated industries.
ControlPlane is a London-based consultancy specialising in cloud-native, Kubernetes, and open source solutions, helping organisations secure complex cloud infrastructures with secure-by-design principles. As a successful start-up, we are a dynamic, cutting-edge, and passionate team that values employee wellbeing, progression, and open source community engagement.
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Design and maintain CI/CD pipelines for automated build, test, security scanning, and deployment.
Provision and manage cloud infrastructure across development, test, and production environments.
Deploy and support containerized applications using Docker and Kubernetes, including monitoring, troubleshooting, and incident response.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed. Headquartered in Tysons, Virginia, it serves the defense, space, healthcare, and energy sectors with a collaborative, agile culture.
Integrate security controls into CI/CD pipelines, including SAST, SCA, and container scanning.
Lead vulnerability management and governance with risk-based prioritization and remediation.
Design and implement security controls across GCP infrastructure using IaC practices.
The company is a technology firm specializing in cloud-native security solutions. It operates with a globally distributed team and emphasizes a flexible, autonomous working culture.
Design and implement secure-by-default workflows for cloud production environments.
Strengthen Kubernetes, CI/CD security, and identity management across the platform.
Collaborate with engineers to improve reliability, observability, and disaster recovery.
The hiring company is a remote-first platform organization focused on building reliable infrastructure and protecting sensitive data across multiple countries. Their culture emphasizes collaboration, developer experience, and evidence-based assessment.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Deploy and automate CI/CD pipelines and establish IaC using modern DevSecOps techniques including serverless and Zero Trust patterns.
Own the POAM process end to end, develop plans of action with target dates, track progress, and close findings proactively.
Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO, and maintain a live dashboard for all security findings.
Oddball brings quality software to the federal space, aiming to improve the daily lives of millions. It is a small company that values learning, growth, and making a big impact.